I want to stay as far away from actual user authentication as I can. My concern is almost strictly display. The parameter I propose would not change the login from being email based (or whatever the new external authentication requires). I can see some possible overlap, though.